Cybersecurity Engineer

Festo India Private Ltd. in Bengaluru is seeking a Cybersecurity Engineer to join their Information Technology team. This is a full-time permanent position. The role involves designing and maintaining frameworks for product classification and automated security mapping, conducting Threat and Risk Assessments (TARAs), security assessments, penetration testing, and vulnerability analysis. You will support the automation of SBOM generation and security testing processes, develop and execute test specifications, cases, and plans for product vulnerabilities, and establish and maintain DevSecOps practices within CI/CD environments. Collaboration with product teams to implement, document, and improve security measures is key, as is supporting the investigation and mitigation of product-related security incidents (PSIRT).

The ideal candidate will have a Bachelor's degree in Computer Science, Cyber Security, or equivalent, with a minimum of 2 years of experience in product security, preferably in industrial automation or automotive sectors. Proficiency in Python test automation and JavaScript programming is required. Familiarity with industrial protocols and PLC systems, CI/CD practices, DevOps, and basic Linux knowledge are advantageous. Understanding of Secure Development Lifecycle and standards like IEC62443-3/62443-4 is a plus. Additional programming knowledge in C, C++, or Shell scripting, as well as experience with security tools like OpenVAS, Nessus, Nmap, Wireshark, and embedded or IoT penetration testing, are desirable. Experience in the embedded domain and Linux hardening is also a plus. Excellent English communication skills are essential.

This role is based at Festo India Pvt Ltd., 237 B, Bommasandra Industrial Area, Hosur Main Road, Bangalore - 99. The working days are 5 days a week, with a hybrid model offering 3 days in the office and 2 days of work from home. Working timings are from 7:45 AM to 5:00 PM. The position requires a minimum of 2 years of experience in cybersecurity and test automation.